技能 golang-cli
📦
golang-cli
v1.3.0 內容修訂 r1 安全 ⚡ 包含腳本⚙️ 外部命令📁 檔案系統存取🌐 網路存取
Build Reliable Go Command-Line Applications
Go command-line projects need consistent commands, configuration, output, shutdown, and testing patterns. This skill applies practical Cobra and Viper guidance with reusable Go examples.
支援: Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "golang-cli" from https://skillstore.io/skills/samber-golang-cli.md and its manifest at https://skillstore.io/api/skills/samber-golang-cli/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「golang-cli」。 Design a deploy command with required environment and tag flags.
預期結果:
- A command layout with declarative argument validation.
- Required environment and tag flags with mutual-exclusion rules.
- Viper bindings and completion values for supported environments.
正在使用「golang-cli」。 Review a list command that mixes logs with pipeable output.
預期結果:
A review that moves records to stdout, diagnostics to stderr, and recommends selectable table, plain, and JSON formats.
正在使用「golang-cli」。 Add graceful shutdown to a server subcommand.
預期結果:
A design using signal-aware context cancellation, SIGINT and SIGTERM support, a shutdown timeout, and distinct handling for normal server closure.
安全審計
安全v1 • 2026/9/6 開啟版本化報告
All 94 static findings are false positives caused by Go syntax, Markdown formatting, Cobra identifiers, completion documentation, and benign build examples. No malicious behavior, prompt injection, data exfiltration, unsafe command execution, or covert system access was found.
14
已掃描檔案
1,129
分析行數
0
複核項目
0
已忽略的誤報
風險因素
⚡ 包含腳本 (12)
assets/examples/args.go:3-7 assets/examples/cli_test.go:3-8 assets/examples/completion.go:3-7 assets/examples/config.go:3-11 assets/examples/exit_codes.go:3-8 assets/examples/flags.go:3-6 assets/examples/main.go:4-6 assets/examples/output.go:3-11 assets/examples/root.go:4-12 assets/examples/serve.go:4-9 assets/examples/signal.go:3-14 assets/examples/version.go:4-9
⚙️ 外部命令 (50)
assets/examples/completion.go:10 assets/examples/completion.go:14 assets/examples/completion.go:17 assets/examples/completion.go:26 assets/examples/completion.go:27 assets/examples/config.go:45 assets/examples/config.go:46 assets/examples/config.go:47 assets/examples/config.go:49 assets/examples/config.go:50 assets/examples/config.go:51 assets/examples/exit_codes.go:12 assets/examples/root.go:28 assets/examples/version.go:37 assets/examples/version.go:38 evals/evals.json:93 evals/evals.json:322 evals/evals.json:326 evals/evals.json:11 SKILL.md:3 SKILL.md:28 SKILL.md:36 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:53 SKILL.md:55-66 SKILL.md:66-68 SKILL.md:68-72 SKILL.md:72-76 SKILL.md:76-77 SKILL.md:77-78 SKILL.md:78-83 SKILL.md:83 SKILL.md:91-92 SKILL.md:92-96 SKILL.md:96 SKILL.md:104 SKILL.md:112-113 SKILL.md:113-114 SKILL.md:114-115 SKILL.md:115-116 SKILL.md:116-117 SKILL.md:117-132 SKILL.md:132-139
📁 檔案系統存取 (4)
🌐 網路存取 (1)
最近一次完成的靜態與語意稽核未偵測到已確認的安全發現。這並不能證明該 Skill 沒有副作用。
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/samber-golang-cli/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/samber-golang-cli?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/samber-golang-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/samber-golang-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/samber-golang-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
samber. (2026). golang-cli security audit report (audit version 1) [Author version 1.3.0]. Skillstore. https://skillstore.io/skills/samber-golang-cli/audits/1BibTeX 引用
@techreport{samber-samber-golang-cli-2026,
author = {samber},
title = {golang-cli security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/samber-golang-cli/audits/1},
note = {Author version 1.3.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "golang-cli security audit report (audit version 1)"
version: "1.3.0"
type: report
authors:
- name: "samber"
date-released: "2026-09-06"
url: "https://skillstore.io/skills/samber-golang-cli/audits/1"
identifiers:
- type: other
value: "skillstore:samber-golang-cli:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 36
架構
100
可維護性
87
內容
65
社群
91
規範符合度
你可以打造什麼
Start a Go CLI
Create a maintainable Cobra command tree with flags, configuration, output rules, and a minimal entry point.
Extend an Existing Tool
Add subcommands, configuration sources, shell completion, or machine-readable output while preserving established project structure.
Review CLI Behavior
Check exit codes, signal handling, output streams, argument validation, and command tests for predictable automation.
試試這些提示
Create a Basic Command
Create a Cobra command named [command]. Add [arguments] and [flags]. Keep main minimal and return errors from command handlers.
Add Layered Configuration
Add Viper configuration to this CLI. Use prefix [prefix], optional file [path], flag bindings, defaults, and clear precedence.
Improve Automation Support
Review this command for scripting. Separate stdout and stderr, add table and JSON output, define exit codes, and add shell completion.
Harden a Long-Running CLI
Refactor this server command for production. Add context cancellation, SIGINT and SIGTERM handling, timed shutdown, typed errors, and command-level tests.
最佳實務
- Read the existing command tree before changing structure or shared behavior.
- Bind configurable flags explicitly and document the precedence of every configuration source.
- Test commands through Cobra interfaces so arguments, output, and errors remain observable.
避免
- Do not call process exit functions inside command handlers because deferred cleanup will not run.
- Do not write logs or diagnostics to stdout because they corrupt piped output.
- Do not require a configuration file when defaults and environment variables can provide valid settings.
常見問題
Which Go CLI libraries does this skill emphasize?
It uses Cobra for commands and flags, plus Viper for layered configuration.
Can it help with a standard library flag application?
Yes, but its detailed examples focus on Cobra and Viper. Simple tools may use the standard flag package.
Does it provide complete application code?
It provides focused reference examples. You must connect them to your modules, dependencies, and business logic.
How does it support shell scripts?
It separates data from diagnostics, recommends stable exit codes, and supports machine-readable output formats.
Does it cover shell completion?
Yes. It covers Cobra generators for Bash, Zsh, Fish, and PowerShell, plus custom flag and argument suggestions.
Can it review an existing CLI?
Yes. It checks command structure, configuration binding, output streams, exit behavior, signal handling, completion, and tests.